$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8A41/A4742092140411EDB6BE681DC4F9AE02/pb5qRLkApAARc5UWhWBre7U8prI.mft File: pb5qRLkApAARc5UWhWBre7U8prI.mft (raw, json) Hash identifier: JFs2m496OUe5NJjdUXMH+LweoiLd4o7x939OzTMVGaw= Subject key identifier: F4:07:74:59:52:D3:13:75:48:32:ED:BE:00:35:80:F3:9B:B7:85:05 Authority key identifier: A5:BE:6A:44:B9:00:A4:00:11:73:95:16:85:60:6B:7B:B5:3C:A6:B2 Certificate issuer: /CN=A91E8A41/serialNumber=A5BE6A44B900A4001173951685606B7BB53CA6B2 Certificate serial: 01BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pb5qRLkApAARc5UWhWBre7U8prI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8A41/A4742092140411EDB6BE681DC4F9AE02/pb5qRLkApAARc5UWhWBre7U8prI.mft Manifest number: 01AA Signing time: Wed 01 May 2024 04:57:45 +0000 Manifest this update: Wed 01 May 2024 04:57:44 +0000 Manifest next update: Wed 08 May 2024 04:57:44 +0000 Files and hashes: 1: pb5qRLkApAARc5UWhWBre7U8prI.crl (hash: 2gH9EmphRrYRJKc7teny80D2MTKZ6MKhejgLMLPFtj8=) 2: 30790D94C4EB11EE977F1E19C4F9AE02.roa (hash: X8vofXLS0ZRvw+znx9ZdsKwvL8ndN7KhWNaI8SKM9R0=) 3: 09BBF470C4E911EE941B385FC4F9AE02.roa (hash: HhO14HmPwWC5GMqICC/XQBtStx7RsFR2cXkeBR+MHMs=) 4: 48494C26140811EDBF3D2F27C4F9AE02.roa (hash: Vf4RjUemASG+N7eLq7L07/5xZOczhEZ2zfLVlEVpOmE=) 5: 46340B92140811EDBF3D2F27C4F9AE02.roa (hash: rwSfgz3W27KmJsXYbBMiVSSgy0wP7TaXhDCYLOud+Ec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8A41/A4742092140411EDB6BE681DC4F9AE02/pb5qRLkApAARc5UWhWBre7U8prI.crl rsync://rpki.apnic.net/member_repository/A91E8A41/A4742092140411EDB6BE681DC4F9AE02/pb5qRLkApAARc5UWhWBre7U8prI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pb5qRLkApAARc5UWhWBre7U8prI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8A41/serialNumber=A5BE6A44B900A4001173951685606B7BB53CA6B2 Validity Not Before: May 1 04:57:44 2024 GMT Not After : May 8 04:57:44 2024 GMT Subject: CN=6631cbc9-0a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2d:46:26:f1:c5:37:c2:97:fe:ac:a3:cb:9d: ba:a5:78:5a:bc:98:80:a3:11:8c:7c:a5:53:58:61: 70:f2:13:75:59:b6:b8:e9:c6:99:a0:a8:c4:cc:b3: 0d:f8:08:9f:ee:fb:c7:ac:bf:0a:cb:d4:be:fc:8a: eb:08:69:87:e2:95:c2:57:23:78:1e:11:93:1c:dc: 7b:5f:b2:89:bd:c4:86:44:7e:a5:42:a6:c5:79:00: 36:3a:3d:ff:99:d7:a5:bd:d7:74:8d:29:80:00:8a: 6c:02:01:0a:aa:7d:49:23:3e:ea:ab:28:24:38:cb: 54:52:32:97:74:a0:da:11:c4:4f:96:65:84:31:db: 40:71:f9:b8:91:3c:b2:12:90:f4:ad:e1:b7:39:00: 2a:d4:e2:02:43:9c:b5:98:0e:29:6b:dd:96:51:18: f1:f2:be:27:c4:45:48:31:84:c8:c2:bd:e9:43:bf: 85:80:4f:ef:7f:05:ea:38:6c:5f:51:84:26:0d:6d: 34:ba:c8:c6:1e:ea:58:3c:d0:a8:3e:9a:f1:70:7b: 1e:33:d2:64:77:cf:ff:ba:7e:b0:2f:67:5b:99:17: a7:00:28:92:70:3e:4a:59:35:90:75:da:a5:2a:5b: 3b:e2:a6:ff:28:d4:8e:fd:4e:d7:13:69:5f:32:3c: 4c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:07:74:59:52:D3:13:75:48:32:ED:BE:00:35:80:F3:9B:B7:85:05 X509v3 Authority Key Identifier: keyid:A5:BE:6A:44:B9:00:A4:00:11:73:95:16:85:60:6B:7B:B5:3C:A6:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8A41/A4742092140411EDB6BE681DC4F9AE02/pb5qRLkApAARc5UWhWBre7U8prI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pb5qRLkApAARc5UWhWBre7U8prI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8A41/A4742092140411EDB6BE681DC4F9AE02/pb5qRLkApAARc5UWhWBre7U8prI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:65:f6:f8:65:5c:b3:ba:36:ab:8c:57:d5:17:b7:04:17:0d: 57:00:52:bd:c6:55:69:10:12:23:d4:8e:7a:3e:ec:22:7c:ea: 91:4d:50:64:56:94:02:c0:ea:e0:34:89:5e:a3:01:ff:ca:16: 80:e9:4c:46:d0:2f:c6:70:b5:18:df:34:4d:9c:cc:2f:de:26: 0d:2a:05:bc:6a:59:ef:e0:86:b4:e4:57:03:09:04:05:5c:14: 34:a2:68:5b:12:12:d4:0b:44:1f:7f:f2:3f:4b:48:d7:6a:01: b6:61:fc:ab:dc:21:fe:4c:31:ef:4e:6f:94:ed:9b:67:8d:4e: 0f:38:a3:90:b8:36:ee:cc:18:7f:b2:21:d0:bf:4b:68:43:6f: fb:f2:07:a5:f2:57:05:b8:74:67:a5:94:fe:3e:d0:ed:cd:3a: 15:ed:44:7d:fc:6d:aa:bd:b3:49:a4:95:9f:55:51:29:e3:a2: c7:f2:4a:8a:ba:ef:f3:9d:a1:82:dd:03:09:ee:be:3a:e5:a3: 2f:1c:35:91:56:bb:5d:c9:c7:6a:98:79:df:6d:24:f4:d7:e4: b9:6d:1e:78:c3:dd:1d:69:5e:c4:ad:65:f7:b4:04:35:da:2c: 71:4a:d8:12:99:bd:b8:93:73:82:8b:25:72:da:f8:1b:0c:3e: fe:e2:55:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThBNDExMTAvBgNVBAUTKEE1QkU2QTQ0QjkwMEE0MDAxMTczOTUxNjg1NjA2QjdC QjUzQ0E2QjIwHhcNMjQwNTAxMDQ1NzQ0WhcNMjQwNTA4MDQ1NzQ0WjAYMRYwFAYD VQQDEw02NjMxY2JjOS0wYThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwC1GJvHFN8KX/qyjy526pXhavJiAoxGMfKVTWGFw8hN1Wba46caZoKjEzLMN +Aif7vvHrL8Ky9S+/IrrCGmH4pXCVyN4HhGTHNx7X7KJvcSGRH6lQqbFeQA2Oj3/ mdelvdd0jSmAAIpsAgEKqn1JIz7qqygkOMtUUjKXdKDaEcRPlmWEMdtAcfm4kTyy EpD0reG3OQAq1OICQ5y1mA4pa92WURjx8r4nxEVIMYTIwr3pQ7+FgE/vfwXqOGxf UYQmDW00usjGHupYPNCoPprxcHseM9Jkd8//un6wL2dbmRenACiScD5KWTWQddql Kls74qb/KNSO/U7XE2lfMjxMqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPQHdFlS 0xN1SDLtvgA1gPObt4UFMB8GA1UdIwQYMBaAFKW+akS5AKQAEXOVFoVga3u1PKay MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEE0MS9BNDc0MjA5MjE0 MDQxMUVEQjZCRTY4MURDNEY5QUUwMi9wYjVxUkxrQXBBQVJjNVVXaFdCcmU3VThw ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BiNXFSTGtBcEFBUmM1VVdoV0JyZTdVOHBySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEE0MS9BNDc0MjA5MjE0MDQxMUVEQjZCRTY4MURDNEY5QUUwMi9wYjVxUkxrQXBB QVJjNVVXaFdCcmU3VThwckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAZfb4ZVyzujarjFfVF7cEFw1XAFK9xlVpEBIj1I56PuwifOqRTVBk VpQCwOrgNIleowH/yhaA6UxG0C/GcLUY3zRNnMwv3iYNKgW8alnv4Ia05FcDCQQF XBQ0omhbEhLUC0Qff/I/S0jXagG2Yfyr3CH+TDHvTm+U7ZtnjU4POKOQuDbuzBh/ siHQv0toQ2/78gel8lcFuHRnpZT+PtDtzToV7UR9/G2qvbNJpJWfVVEp46LH8kqK uu/znaGC3QMJ7r465aMvHDWRVrtdycdqmHnfbST01+S5bR54w90daV7ErWX3tAQ1 2ixxStgSmb24k3OCiyVy2vgbDD7+4lVI -----END CERTIFICATE-----Generated at Wed May 1 05:55:46 2024 by rpki-client on console-ams.rpki-client.org